fa20edf2e9
Live /etc/caddy/Caddyfile matches configs/caddy mirror. Record daylog, forgejo note, and close LOCAL-CHANGES-PENDING Caddy items.
40 lines
1.8 KiB
Markdown
40 lines
1.8 KiB
Markdown
# Local changes / follow-ups — not yet committed
|
|
|
|
Working list for koopa-admin-log. Items here are **to do or only local** until explicitly committed and pushed to `git.hacktivism.ch`.
|
|
|
|
Status legend: `open` · `local-only` · `done-on-host` · `blocked`
|
|
|
|
---
|
|
|
|
## Nachführen (sync / mirror)
|
|
|
|
| Item | Status | Notes |
|
|
|------|--------|--------|
|
|
| Live `/etc/caddy/Caddyfile` vs `configs/caddy/Caddyfile` | `done-on-host` | Applied 2026-07-10; live **MATCH** mirror (git. in ACME list, SSH :9200). |
|
|
| `firewall-cmd --list-all` re-export | `open` | `host/firewalld/list-all.txt` updated by hand with **9200/tcp** (verified open). Re-export as root when possible for exact dump. |
|
|
| Castopod compose mirror | `done` (committed) | `configs/castopod/` |
|
|
| Prime compose mirror | `done` (committed) | `configs/prime/` (WEBUI_PASSWORD redacted) |
|
|
| Tor `configs/tor/` | `done` (committed) | matched live; README added |
|
|
| `host/caddy/` full vhost map | `done` (committed) | was stale Taler-only |
|
|
|
|
## Local-only / do not commit yet
|
|
|
|
| Path / topic | Status | Notes |
|
|
|--------------|--------|--------|
|
|
| *(none staged intentionally)* | — | Keep secrets out of this repo always. |
|
|
| This file (`ops/LOCAL-CHANGES-PENDING.md`) | `done` | Committed with Caddy apply verification. |
|
|
|
|
## Host ops (not in git)
|
|
|
|
| Item | Status | Notes |
|
|
|------|--------|--------|
|
|
| Apply desired Caddyfile on koopa | `done-on-host` | verified MATCH 2026-07-10 |
|
|
| firewalld permanent 9200 | `done-on-host` | verified LAN/hairpin/`ssh -T` |
|
|
| VeciGate 9200 DNAT/hairpin/IPv6 | `done-on-host` | see vecigate-admin-log |
|
|
|
|
## When closing an item
|
|
|
|
1. Fix on host and/or update mirror in this tree.
|
|
2. `git add` · commit · `git push origin main`.
|
|
3. Mark row `done` or remove from this list.
|
|
4. If this tracking file itself should be public, commit it in a separate intentional commit.
|